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(57) ABSTRACT 

In a method of protecting against unauthorized use of a 
vehicle having a communication structure for exchange of 
data between a receiving unit, a use protection and control 
unit and at least one operationally essential system control, 
a master station broadcasts a signal defining use restrictions 
applicable to the vehicle, and the use protection and control 
unit aboard the vehicle checks for violation of the use 
restrictions, and disables the at least one operationally 
essential system control if a violation is detected. 

24 Claims, 5 Drawing Sheets 
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METHOD FOR PROTECTING HIRE arranged on the vehicle and determines, continuously or at 

VEHICLES AGAINST UNAUTHORIZED USE regular intervals, the geographic area where the vehicle is 

located, and conveys this information to a master station via 
a transmitting device aboard the vehicle end. A receiving 

BACKGROUND AND SUMMARY OF THE 5 unit for receiving and evaluating the locating information 

INVENTION broadcast by the transmitting device is present in this master 

The invention relates to a method for protecting vehicles station - "^f location of , me vehic ) e can ' hus be monitored 

(particularly leased or hire vehicles), against unauthorized continuously or at regular intervals in the master station, 

use, by broadcasting a use enabling signal from a stationary This device has the disadvantage that it provides no 

master information station. 10 arrangement for disabling the vehicle. The tracking of the 

Such a protection arrangement is disclosed for example in vehicle f bv ^ mas . ter f tion Ca ? * P rev <; n,ed > . f ° r 

German patent document DE-A44 40 975.3-51, in which an exam P le : b \ ***W6 •»* transrmtting device at the vehicle 

anti-theft control unit and a receiving device of a mobile end or ^ ,ocatul S s yf m ' to addltl0n ' a . lar S e fP a <*y 

communication system are arranged in the vehicle. A com- „ terms u o£ transmitung dev lC es and transmitting frequencies 

munication structure aboard the vehicle permits, on the one 15 m *st *» m f e available a large number of vehicles are to 

hand, the exchange of data between an anti-theft control unit be , tracked continuously. If for example a digital radio 

and the receiving device and, on the other hand, the telephone « used as we mobile communicaUon system, high 

exchange of data between the anti-theft control unit and at communication coste are incurred it i order continuously to 

least one operationally necessary control unit of the vehicle. M conve y the resul,s of ** locatin g of the vemcle t0 me master 

As long as a vehicle has not been reported stolen, or station. 

provided another unauthorized use of the vehicle has not German patent document DE 42 24 536 Al discloses a 

been determined, signals are transmitted from a master system for the geograpmcaUy defined limitation of the area 

station to the vehicle via the mobile communication system of movement of vehicles. Here, signals are received from 

at regular time intervals, the said signals being received by satellites by means of a receiver, which signals are converted 

the receiving device. The reception of the signals is con- mto position coordinates in the vehicle and compared with 

veyed from the receiving device to the anti-theft control unit defined prescribed values. If a vehicle leaves a previously 

via the communication structure. The signals are detected defined geographic area, a Motronic system which controls 

and if they are determined to be directed at the vehicle, the drive system is blocked by means of an evaluation unit 

operation of the vehicle is enabled for a prescribed time and at the Mme time the current location of the vehicle is 

period interval between two which is longer than the time transmitted to a control center by means of a transmission 

successive signals. If no signal is received before expiration umt - 

of the period for which operation of the vehicle is enabled, A disadvantage of this arrangement is that the limitation 

the enabling of operation of the vehicle is not prolonged. The of the area of movement has to be defined in advance, and 

anti-theft control unit then actuates the at least one opera- 35 cannot readily be changed during the period of use. In 

tionally necessary control unit via the communication struc- addition, it is disadvantageous that measures are only taken 

ture and prevents the further operation of this control unit, for the possibility of the vehicle leaving a specific geo- 

at least at the next attempt to activate the vehicle. graphical area which may not be adequate for specific 

This measure prevents a vehicle from being used without applications. Furthermore, no measures are provided to 

authorization over a relatively long period of time. Also, ^ address the possibility that the receiver may be tampered 

operation is not dependent on signals which are emitted by or destroyed. 

the vehicle and may be disrupted, but is instead dependent German patent document DE 43 20 174 Al, describes a 

exclusively on reception of the signals broadcast by the method for protecting operation of a motor vehicle by the 

master station so that disruption or destruction of the com- authorized user, in which a vehicle transmits a test signal to 

munication system does not permit prolonged use of the 4S a master station which replies with a confirmation signal. If 

vehicle. the confirmation signal is not received by the vehicle, then, 

A disadvantage of this method is that it does not enable a except in specific exceptional cases, an operation disabling 

location of the vehicle. As a result, it is still possible, for device is triggered making operation of the vehicle impos- 

example after misappropriating the vehicle, to transfer it to sible. 

another location on a transporter, without risk. In addition, 50 The risk of unauthorized use is particularly great in the 

a relatively long period of time may pass between the time case of hire vehicles or leased vehicles as well as in the case 

when the unauthorized use of the vehicle starts and the time of other vehicles which are not used by the owner himself, 

when the information relating to the unauthorized use is and also in the case of taxis or lorries, 

conveyed to the master station, so that broadcasting of the An object of the invention is to prevent reliably the 

signals may not commence until a considerable period of 55 unauthorized use of a vehicle, in particular of a hire vehicle 

time after the unauthorized use has started. During this or leased vehicle. 

period of time, the unauthorized use of the vehicle can be This object is achieved by the method in accordance with 

continued unhindered. In addition, if a large number of the invention, in which a master station broadcasts a signal 

vehicles are to be protected in this manner, a very large defining use restrictions applicable to the vehicle in ques- 

transmission capacity is required for the signals which are go tion. A use protection control unit aboard the vehicle checks 

broadcast at regular time intervals. Therefore, this method is for violation of the use restrictions, and disables at least one 

suitable only for protecting a strictly limited number of operationally essential vehicle control system if a violation 

vehicles. is detected. 

Furthermore, it is known for example from the article According to another feature of the invention, use of the 

"Satellitenhilfe gegen Auto-Klau" [Using satellites to com- 65 vehicle is possible only it before the vehicle is handed over 

bat car theft] by R. Gramm in the journal Funkschau Issue (before a journey is begun in the case of taxis and lorries), 

16/1993 pp. 42 to 45 to provide a locating system which is a bidirectional communication takes place between the 
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vehicle and master station, and takes place at a later time as FIGS. 2A-2D show a flow chart of a method according to 

well. As a result, it is possible not only to transmit exclu- the invention which is particularly suitable for detecting 

sively a position message of the vehicle to the master station unauthorized use of fleet vehicles, such as taxis, hire 

or to transmit exclusively enabling signals to the vehicle vehicles or leased vehicles, referred to below as hire 

from the master station, but it is also possible to make the 5 vehicles. For example, exceeding the hire period, or a fixed 

communication appropriate to requirements. Before the maximum distance travelled may constitute an unauthorized 

vehicle is handed over, the use restriction or restrictions use - Similarly, violation of restrictions to certain regions or 

applicable to the vehicle must be defined. Operation of the a prohibition on taking the vehicle into specific regions may 

vehicle is not possible until this use restriction is defined. ako cons H! ute ™ unf "thorized use in contravention of the 

rti , , , , , , , n contract. The possibilities of unauthorized use are therefore 

Other objects, advantages and novel features of the 10 more di^^ tnan inthecase of privateIy owned vehicles . In 

present invention will become apparent from the following additi ^ ^ ^ be aWe to react flexiw tQ 

detailed description of the invention when considered in ^ of Ms ^ bf , ^ ^ ^ makf . 

conjunction with the accompanying drawings. continued use of the vehicle possible, even at a later time. 

BRIEF DESCRIPTION OF THE DRAWINGS 15 In the case of nire vehicles, according to step 301 in FIG. 

. . 2A, before each individual hiring of a vehicle an agreement 

FIG. 1 is a schematic depiction of an arrangement for ^ made between ^ leasin , ^ the hirin rt 

carrymg out the method according to the invention; and relating t0 me ^ of the vehicle . In step 302 , the leasing 

FIGS. 2A-2D show a flow chart of a method for protect- agent communicates the agreed use of the vehicle to the 

ing fleet vehicles, such as hire vehicles, against unauthorized ^ master station, which stores these data in a file assigned to 

use according to the invention. ^ ve hi c le, and monitor compliance therewith. Monitoring 

DETAILED DESCRIPTION OF THE DRAWINGS of . me "f restriction , can ^ be ou ' ^ 

and in the master station. The mvention is described below 

FIG. 1 shows an arrangement for carrying out the method with reference to a method of monitoring the use restriction 

according to the invention. A transmitting device and a 25 in the vehicle itself, a communication between the master 

receiving device, which may be combined in a single unit 1 station and the vehicle being required only if either the use 

to form a mobile communication system, are provided for restriction has been transgressed or the use restriction stored 

transmitting data between the vehicle 1 and a master station in the vehicle has been changed. 

2. The transmitting device and the receiving device can be \ change may be in this context either a narrowing or an 

combined to form a mobile communication system. This 3Q extension of the use restriction. 

may be for example a mobile telephone which transmits Alternatively, it is also possible for the monitoring of the 

digital data, for example Digital European Cordless Tele- use restriction to be carried out in the master station. Then, 

phones (DECT). The telephone system at the vehicle end a status sjgn^ which contains, in addition to the vehicle 

must, however, be capable of automatically establishing a identification, all the variables which are subject to a use 

connection to the master station. In order to permit the 35 restriction and are measured or determined in the vehicle, 

telephone to communicate in the meantime, the set-up would nave t0 ^ transmitted to the master station from the 

connection (any form of exchange of data) must be capable vehicle as a function of specific criteria (for example once 

of being carried out with conversations possibly being every 2 hours of operation, whenever the vehicle is 

carried out by vehicle occupants in the background. The activated, every 200 km driven or at least 3 times daily). The 

transmission of data or of signals between the vehicle and ^ master stat i on then replies to the status signal with an 

the master station, and vice versa, always occurs here in enabling signal if a transgression of the use authorization has 

coded (ciphered etc.) form in order to prevent third parties not bccn determined. If the vehicle does not receive the 

from being able to broadcast corresponding signals which enabling signal, it goes initially into the residual use mode 

are interpreted by the master station as coming from a and> when tne fafat use of the vehicle which is tolerated 

vehicle or by the vehicle as coming from the master station. 45 during me res i dual ^ nas expired, the vehicle is deacti- 

The signals broadcast by the vehicle and master station must vated 5y disabimg at least one operationally necessary 

always have a vehicle-specific identification in order to control unit 

prevent confiision between vehicles and so as to avoid a use when ^ vehide {& d ^ ^ k m 3(M 0f 

restriction bemg mcorrectly redefined for the wrong vehicle. 305 it ^ determined whether a standard ^ of the vehicle 

In addition, a communication structure 4 is provided in 50 ^ taking place in step 306. (Standard use exists if no use 

the vehicle, by which the transmitting device and the receiv- outside the use agreement has yet been determined.) If a 

ing device 3 communicate with the use protection control standard use is taking place, the system jumps to step 1301 

unit 5 and at least one operationally necessary control unit (p IG . 2B). Otherwise, it is interrogated in step 307 whether 

6. Data buses, for example CAN, VAN or D2B, may serve a res idual use of the vehicle is taking place. A residual use 

as the communication structure 4. The transmission of the 55 0 f me vehicle occurs if a use beyond the terms of the use 

data via the communication structure may also occur in agreement has been determined, but, before the vehicle is 

coded form. deactivated, the person hiring the vehicle is to be given time 

For locating purposes, a locating system 7, such as for and opportunity to come to an agreement with the hiring 

example GPS (Global Positioning System), is required in the agent for an extension of use. If a residual use is taking 

vehicle. This, too, is connected to the use protection control 60 place, the system jumps to step 2301 (FIG. 2Q. Otherwise, 

unit via the communication structure 4 of the vehicle. in step 308 it is checked whether the service mode is 

In this context, the use protection control unit 5 or the activated, in which it is possible to operate the vehicle for the 

entirety of the control units connected to the communication necessary vehicle movements, for example for 

structure can continuously perform checks of the system maneuvering, making ready, parking and servicing the 

integrity, and in case of an attack on the system integrity, 65 vehicle. The service mode cannot be activated as long as a 

they can deactivate at least one operationally necessary use of the vehicle is registered at the master station. In 

control unit and the transmission of locating signals. addition, it permits only a very restricted operation, for 
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example within a strictly limited geographical area or only 
over a distance of several kilometers. If the service mode has 
already been activated, the system jumps to step 3301 (FIG. 
2D). Otherwise, the service mode is activated first and then 
the system jumps to step 3301. 

Steps 1301 to 1316 (FIG. 2B) comprise the checking, as 
carried out in the standard mode. In step 1301, a system 
check is carried out. Here, it is checked for example whether 
the integrity of the system has been violated. If so, the 
system jumps to step 1302, and the vehicle is prevented from 
being operated by deactivation of at least one operationally 
necessary control unit. A locating signal may be broadcast. 

If it has been detected in step 1301 that the system at the 
vehicle end is operating satisfactorily, in step 1303 the 
vehicle is activated or its further use is permitted. In step 
1304 it is checked whether the use restriction has been 
violated. If so, processing advances to step 2305, and 
residual use of the vehicle is activated. Since the steps 1305 
to 1309, 2309 to 2313 and 3307 to 3311 correspond to one 
another, they are described only once with reference to steps 
1305-1309. 

If a violation of a use restriction is not detected in step 
1304, it is determined in step 1305 whether a vehicle - 
supported alarm has been issued. A vehicle-supported alarm 
has been issued if, for example, it is determined that a 
switching device, provided for this purpose, has been inten- 
tionally actuated by an occupant of the vehicle or the 
geographical use restriction has been violated. 

If a vehicle-supported alarm has not been issued, a 
corresponding message is transmitted to the master station 
by the vehicle in step 1309. A locating signal can be 
transmitted from the vehicle to the master station at the same 
time as the message. The broadcasting of this message 
cannot be detected by the occupants of the vehicle. This 
procedure makes it possible, for example, for the driver 
easily to summon help in the event of a breakdown or in the 
case of accidents. If appropriate, a voice connection between 
the driver and the master station can also be established 
automatically. Actuation of the switching device 
("emergency switch") can also result in a jump to step 1308 
if deactivation of the vehicle is desired after the transmission 
of the message to the master station. Otherwise, it is checked 
in step 1307 whether the vehicle has left a specific geo- 
graphical area or entered a specific geographical area which 
is excluded from use. If so, in accordance with step 1308 the 
activation of the vehicle, after the next deactivation, is 
prevented in that, at least then, at least one operationally 
necessary control unit is deactivated. 

Alternatively, operation of the vehicle can be progres- 
sively terminated in that for example the driving capabilities 
of the vehicle are progressively reduced by means of the 
engine control and/or, if appropriate, the gearbox control 
until the vehicle slowly comes to a standstill. When the 
vehicle is at a standstill, at least one operationally necessary 
control unit (engine control, gearbox control) can then be 
deactivated, so that the vehicle is disabled. This prevents the 
vehicle's continuing to be moved further during a relatively 
long period of time after it has been determined that further 
operation of the vehicle is no longer desired. When the 
disabling signal is received, a current locating signal can be 
additionally broadcast periodically in a fixed chronological 
sequence. The chronologically fixed sequence comprises 
two locating signals which are transmitted shortly one after 
the other, for example within less than one minute or even 
less than 30 seconds, and an adjoining waiting time without 
the broadcasting of a locating signal. The broadcasting of the 
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locating signal which takes place twice in brief succession is 
intended to permit the master station to determine not only 
the current location of the vehicle but also its direction of 
travel. The minimum chronological interval is downwardly 

5 limited here by the resolution of the locating system. The 
adjoining waiting time is to be selected to be sufficiently 
short that on the one hand reasonable tracking of the vehicle 
from the master station is made possible, and on the other 
hand overloading of the master station by an excessively 

10 large data input is avoided. 

Thus, in accordance with this example, the transgression 
of a geographical use restriction is not treated as a more 
serious transgression than other use restrictions, which 
results in the immediate deactivation of the vehicle accord- 

15 ing to one of the methods in accordance with step 1308; and 
there is no provision for residual use during which an 
arrangement can be made between the driver and the master 
station. 

Since the steps 1310 to 1313, 2314 to 2317 and 3312 to 

20 3315 correspond to one another, they are only described 
once with reference to steps 1305-1309. After it has been 
determined in step 1305 that no vehicle supported alarm has 
been actuated, it is checked in step 1310 whether a signal 
broadcast by the master station has been received by the 

25 vehicle. If so, in step 1311 it is checked whether the received 
signal corresponds to a use extension signal. If it does, the 
system jumps to step 1314. Otherwise, in step 1312 it is 
determined that a further use of the vehicle is not to take 
place. In accordance with step 1313 the vehicle is then 

30 deactivated, in a way analogous to step 1308. 

In step 1314, the current values of the use restriction 
parameters and the values of variables which are subject to 
a use restriction are updated, and in step 1315 it is checked 
whether the vehicle has been deactivated by the driver. If so, 

35 in step 1316 the current values of the use restriction param- 
eters and the values of variables which are subject to a use 
restriction are stored. Otherwise, the system jumps back to 
step 1301. 

^ The method in accordance with steps 2301 to 2320 (FIG. 
2C) corresponds in large measure to the procedure according 
to steps 1301 to 1316. However, a residual use of the vehicle 
does take place. During this residual use, although a trans- 
gression of the use restriction is taking place, a further use 

45 of the vehicle is temporarily tolerated. The vehicle is deac- 
tivated only if no extension of the use authorization is 
carried out during this residual use. 

Steps 2301 and 2302 correspond to steps 1301 and 1302 
(FIG. 2B). In step 2303 it is checked whether a use restric- 

50 tion has occurred. If so, activation of the vehicle is prevented 
in step 2304. 

Otherwise, in accordance with step 2305 the further 
operation of the vehicle or the activation of the vehicle is 
permitted. In step 2306 it is again determined whether a use 

55 restriction has been violated. If it has, in step 2307 the 
vehicle is deactivated in a way analogous to one of the 
procedures described in step 1308 (FIG. 2B) Otherwise, in 
accordance with step 2308 the driver is requested, with 
visual or acoustic means, to enter into communication with 

60 the master station. During this process, the remaining 
residual use before the deactivation of the vehicle may be 
signalled to the driver. At the same time, a locating signal 
may also be broadcast. 
The procedure adopted in steps 2309 to 2313 is analogous 

65 to the procedure in steps 1305 to 1309. The procedure in 
steps 2314 to 2317 corresponds to the procedure in steps 
1310 to 1313, in which case, in contrast with step 1311, if 
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the reception of a use extension signal is determined in step 
2315 the system does not jump to step 2318 but instead to 
step 1303. The reception of a use extension signal means that 
the vehicle has been enabled for further use from the master 
station. This takes place if the driver has entered in com- 
munication with the master station and an agreement for 
further use of the vehicle has been arrived at. 

In step 2318 the current values of the use restriction 
parameters and the values of variables which are subject to 
a use restriction are updated. In step 2319 it is determined 
whether the vehicle has been deactivated by the driver. If it 
has, step 2320 the current values of the use restriction 
parameters and the values of variables which are subject to 
a use restriction are stored. Otherwise, the system jumps 
back to step 2301. 

Steps 3301 to 3318 constitute the service mode, which is 
a default mode of operation that is implemented if there is 
no use of the vehicle registered at the master station. It 
permits the vehicle to be operated for the purposes of the 
leasing agent. 

In accordance with step 3301, a system check is carried 
out. Here, it is checked for example whether the integrity of 
the system has been violated. If so, the system jumps to step 
3302, and operation of the vehicle is prevented by deacti- 
vating at least one operationally necessary control unit. A 
locating signal can be broadcast. 

If the system integrity has not been violated, in step 3303 
activation, or the further operation, of the vehicle is permit- 
ted. In step 3304 it is then determined whether a vehicle use 
restriction has been violated. If it has, in step 3305 the 
vehicle is deactivated according to one of the procedures 
described in step 1308. 

In accordance with step 3306 a locating signal is broad- 
cast from the vehicle. Information relating to the remaining 
possible use of the vehicle can be indicated to the driver. 
Steps 3307 to 3311 correspond to steps 1305 to 1309 (FIG. 
2B). Steps 3312 to 3315 correspond to steps 1310 to 1313. 
In contrast with step 1311, it is interrogated in step 3313 
whether a use restriction has been registered in the master 
station, that is to say whether a possible use of the vehicle 
has been registered in the master station by the leasing agent. 
If this is the case, the system jumps to step 1303 (FIG. 2B). 

In step 3316, a request for the transmission of a use 
restriction is sent to the master station, which request is 
replied to only if appropriate data has been received from the 
leasing agent at the master station. In step 3317 it is checked 
whether the vehicle has been deactivated by the driver. If 
this is the case, in step 3318 the current valus of the use 
restriction parameters and the values of variables which are 
subject to a use restriction are stored. Otherwise, the system 
jumps back to step 3304. 

Once a vehicle has been disabled by deactivation of an 
operationally necessary control unit at the instigation of the 
use protection control unit, the vehicle can be reactivated, 
for example, by the transmission of an operation enabling 
signal from the master station, to the transmitter/receiver on 
the vehicle, which conveys this signal to the use protection 
control unit. The use protection control unit tests the signal 
and if it is determined to be valid, it cancels the deactivation 
of operationally necessary control units. The vehicle can 
then be driven again. The broadcasting of the operation 
enabling signal by the master station takes place for example 
when an appropriate message from an authority or the owner 
of the vehicle is received at the master station. 

Alternatively or additionally it can be provided that the 
vehicle can be reactivated only if a code, which is deter- 
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mined to be valid by the use protection control unit, is 
entered via a data input interface which is connected to the 
said unit. In this context, it is advantageous if the number of 
units which generate an appropriate code is small and they 
are subject to monitoring by the master station. 

Although the invention has been described and illustrated 
in detail, it is to be clearly understood that the same is by 
way of illustration and example, and is not to be taken by 
way of limitation. The spirit and scope of the present 
invention are to be limited only by the terms of the appended 
claims. 

What is claimed is: 

1. A method for protecting against unauthorized use of a 
vehicle having a receiving device, a communication struc- 
ture for exchange of data between at least the receiving 
device, a use protection control unit and at least one opera- 
tionally necessary control unit, the receiving device receiv- 
ing data broadcast by a stationary master station which is 
situated at a fixed location, said method comprising the steps 
of: 

use restrictions applicable to the vehicle are established 
by a controlling authority, prior to operation of the 
vehicle; 

data which contain said use restrictions applicable to the 
vehicle are stored in the master station in a file assigned 
to the vehicle; 

the master station broadcasts a coded data signal contain- 
ing coded information identifying said use restrictions 
applicable to the vehicle; 

the receiving device receives said coded data signal, 
including said coded information identifying said use 
restrictions; 

the use protection control unit checks for the transgression 
of a use restriction contained in said data signal 
received by said receiving device; and 

if the violation of a use restriction occurs, at the least one 
operationally necessary control unit is deactivated. 

2. A method for protecting against unauthorized use of a 
vehicle having a transmitting and receiving device, a com- 
munication structure for exchange of data between at least 
the transmitting and receiving device, a use protection 
control unit and at least one operationally necessary control 
unit, the transmitting and receiving device transmitting data 
to, and receiving data broadcast by, a master station situated 
at a fixed location remote from the vehicle, said method 
comprising the steps of: 

use restrictions applicable to the vehicle are established 
by a controlling authority prior to operation of the 
vehicle; 

data which contain said use restrictions are stored in the 
master station in station in a file assigned to the vehicle; 

in accordance with set reporting criteria, the use protec- 
tion control unit broadcasts a status signal via the 
transmitting and receiving device, said status signal 
including current values of vehicle operation variables 
which are subject to at least one of said use restrictions; 

after reception of the status signal, the master station 
checks at least the vehicle operating variables based on 
the current values transmitted from the vehicle to 
determine if a violation of a use restriction has 
occurred; and 

the master station broadcasts data which contain an 
enabling signal only if a violation of a use restriction 
has not occurred. 

3. The method according to claim 1 wherein the trans- 
mitting device and the receiving device are combined in a 
mobile communication system. 
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4. The method according to claim 1 wherein: 

a function check at least of the communication structure, 
the transmitting device, the receiving device and the 
use protection control unit is carried out; and 

a detected degradation of the system integrity is evaluated 5 
as violation of a use restriction. 

5. The method according to claim 1 wherein after viola- 
tion of a use restriction, further operation of the vehicle is 
permitted for a residual use. 

6. The method according to claim 5 wherein during 10 
residual use of the vehicle, a driver of the vehicle is 
requested to establish a connection to the master station. 

7. The method according to claim 5 wherein during 
residual use of the vehicle, a connection is established 

• 15 

between a driver of the vehicle and master station. 

8. The method according to claim 1 further comprising the 
steps of: 

if no use restrictions are signalled to the master station or 
to the vehicle, activating a service mode; and 2Q 

prescribing a specific use restriction from among possible 
use restrictions during the service mode, it being 
impossible for the use restriction to be renewed or 
extended, and only brief operation of the vehicle being 
made possible. 25 

9. The method according to claim 1 further comprising the 
steps of: 

determining a current location of the vehicle by means of 

a locating system in the vehicle; and 
at least when a use restriction is violated, broadcasting a 30 

locating signal which represents the current location via 

the transmitting device. 

10. The method according to claim 9 wherein a locating 
signal is continuously broadcast while the vehicle is oper- 
ating in a service mode. 35 

11. The method according to claim 9 wherein, when a 
residual use is taking place, current locating signals are 
periodically broadcast in a fixed chronological sequence. 

12. The method according to claim 1 wherein a violation 

of the use restriction comprises exceeding a prescribed time 40 
interval which is independent of the use of the vehicle. 

13. The method according to claim 1 wherein a violation 
of the use restriction comprises exceeding a prescribed 
operating period. 

14. The method according to claim 1 wherein a violation 45 
of the use restriction comprises exceeding a prescribed 
maximum distance travelled. 

15. The method according to claim 1 wherein a violation 
of the use restriction comprises exceeding a prescribed 
number of activations of the vehicle. 50 

16. The method according to claim 1 wherein a violation 
of the use restriction comprises leaving or entering a specific 
geographical area. 

17. The method according to claim 1 further comprising 
the steps of: 
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when the vehicle is activated, it is checked whether a 
disabling signal has been received from the master 
station; and 

if a disabling signal has been received, the activation of 
the vehicle is prevented by deactivation of at least one 
operationally necessary control unit. 

18. The method according to claim 17 further comprising 
the steps of: 

after reception of a disabling signal, a vehicle-locating 

process is performed; and 
a locating signal is broadcast at least once. 

19. The method according to claim 1 further comprising 
the steps of: 

after a violation of a use restriction, the reactivation of the 
vehicle is made possible by use extension signals 
broadcast by the master station, terminating the deac- 
tivation of the at least one operationally necessary 
control unit; and 

the use restriction of the vehicle is extended at the same 
time. 

20. The method according to claim 1 further comprising: 
if the vehicle receives an operation enabling signal broad- 
cast by the master station, deactivation of the at least 
one operationally necessary control unit is cancelled by 
the use protection control unit via the communication 
structure. 

21. The method according to claim 1 wherein a data input 
interface which is connected to the use protection control 
unit is arranged at the vehicle end, at least the inputting of 
a code, which has been detected as valid, via the data input 
interface being required in order to reactivate the at least one 
operationally necessary control unit. 

22. The method according to claim 1, wherein: 

said master station broadcasts signals containing respec- 
tive use restrictions applicable to a plurality of vehicles; 
and 

said signals broadcast by the master station include a 
vehicle specific identification information for a vehicle 
whose use restrictions are contained in said signals. 

23. The method according to claim 1, wherein use of the 
vehicle is enabled only if a bidirectional communication 
takes place between the master station and the vehicle prior 
to an operation of the vehicle, and at a later time also. 

24. The method according to claim 2, wherein: 

said status signal is broadcast by said use protection 
control unit at times determined according to predeter- 
mined criteria; 

operation of the vehicle is possible only when said 
enabling signal is received from said master station in 
response to said status signal; and 

absence of receipt of a responsive enabling signal causes 
deactivation of the at least one operationally necessary 
control unit. 
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